Application/Control No. 10/023, 846 Attorney Docket No. 30030392-2 



AMENDMENTS TO THE CLAIMS 
Claims 1-41 (Cancelled) 

42. (New) A method of communicating credentials, the method comprising: 

a first party communicating to a s e cond party a composite credential across a 
distributed electronic network to a second party w herein the composite credential 
comprises a plurality of obfuscated credentials in which different obfuscation is used for 
at least two credentials in the composite credential; 

the second party de-obfuscating at least one credential; and 
communicating to a third party at least one obfuscated credential from the 
composite credential. 

43. (New) A method of communicating credentials according to claim 42, wherein 
the second party receives a composite credential and the second party modifies the 
received composite credential before communicating it to the third party. 

44. (New) A method of communicating credentials according to claim 42, wherein 
the second party receives a composite credential and the second party communicates 
the received composite credential to the third party. 

45. (New) A method of communicating credentials according to claim 42, wherein all 
credentials are obfuscated within the composite credential. 

46. (New) A method of communicating credentials according to claim 45, in which 
different obfuscation is used for each obfuscated credential in the composite credential. 

47. (New) A method of communicating credentials according to claim 42, wherein 
the composite credential comprises a first credential and a second credential in which 
the second credential is enveloped by the first credential. 

48. (New) A method of communicating credentials according to claim 42, wherein 
the first party communicates to the second party an obfuscated composite credential 
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comprising a first credential and a second credential in which the second credential is 
enveloped by the first credential, wherein the obfuscated composite credential is de- 
obfuscated by the second party thereby to obtain the first credential and a partly de- 
obfuscated second credential, which partly de-obfuscated second credential is 
communicated by the second party to a third party. 

49. (New) A method of communicating credentials according to claim 48, wherein 
the third party de-obfuscates the partly de-obfuscated second credential. 

50. (New) A method of communicating credentials according to claim 42. wherein 
the composite credential is obfuscated. 

51 . (New) A method of communicating credentials according to claim 50, wherein 
the composite credential is at least partly obfuscated, and wherein the second party de- 
obfuscates a relevant credential. 

52. (New) A method of communicating credentials according to claim 42, wherein at 
least one credential is digitally signed. 

53. (New) A method of communicating credentials according to claim 52, wherein a 
plurality of credentials is digitally signed. 

54. (New) A method of communicating credentials according to claim 52. wherein all 
credentials in the composite credential are digitally signed. 

55. (New) A method of communicating credentials according to claim 42, wherein 
the composite credential is digitally signed. 

56. (New) A method of communicating credentials according to claim 42, in which 
the distributed electronic network is the internet. 
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